[chuck c <bubbasnmp@xxxxxxxxx>]

That timestamp (64dad964) starts and end with a 64 byte so it passes the check in:

https://gitlab.com/wireshark/wireshark/-/blob/master/epan/dissectors/packet-icmp.c#L1741

Please open an issue on the Wireshark Gitlab issues page (https://gitlab.com/wireshark/wireshark/-/issues/) including the text from your email and the two attached files.

On Wed, Aug 16, 2023 at 9:07 AM Stefan Kleedehn <sk@xxxxxxxxxxx> wrote:

Hello all,

I have attached a pcap with 6 icmp echo requests. In frame 5 the
icmp.data_time is wrong. It looks to me that the order of the hex value
of the icmp.data_time field in frame 5, is interpreted incorrectly. For
the other values it looks fine.


Many greetings,

Stefan___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe